---
id: CVE-2024-42156
title: 's390/pkey: Wipe copies of clear-key structures on failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/pkey: Wipe copies of clear-key structures on failure

  Wipe all sensitive data from stack for all IOCTLs, which convert a
  clear-key into a protected- or secure-key.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d <
    382f94bb724b41a76030557a29bbffb965d4c0ae
  - >-
    Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d <
    a891938947f4427f98cb1ce54f27223501efe750
  - >-
    Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d <
    7f6243edd901b75aaece326c90a1cc0dcb60cc3d
  - >-
    Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d <
    d65d76a44ffe74c73298ada25b0f578680576073
  - Linux 5.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T16:15:08.677401Z'
published: '2024-07-30'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T12:18:55.967Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-42156'
references:
  - url: 'https://git.kernel.org/stable/c/382f94bb724b41a76030557a29bbffb965d4c0ae'
  - url: 'https://git.kernel.org/stable/c/a891938947f4427f98cb1ce54f27223501efe750'
  - url: 'https://git.kernel.org/stable/c/7f6243edd901b75aaece326c90a1cc0dcb60cc3d'
  - url: 'https://git.kernel.org/stable/c/d65d76a44ffe74c73298ada25b0f578680576073'
tags:
  - cve.org
epss: 0.00212
epssPercentile: 0.11551
ingestedAt: '2026-11-03T13:45:42.683Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/pkey: Wipe copies of clear-key structures on failure

Wipe all sensitive data from stack for all IOCTLs, which convert a
clear-key into a protected- or secure-key.

## Affected

- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 382f94bb724b41a76030557a29bbffb965d4c0ae`
- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < a891938947f4427f98cb1ce54f27223501efe750`
- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < 7f6243edd901b75aaece326c90a1cc0dcb60cc3d`
- `Linux >= f2bbc96e7cfad3891b7bf9bd3e566b9b7ab4553d < d65d76a44ffe74c73298ada25b0f578680576073`
- `Linux 5.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.